Privacy Policy

1. Introduction

WolfWhale EdTech (“WolfWhale,” “we,” “us,” or “our”) operates the WolfWhale Learning Management System and Student Information System (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our Service.

We are committed to protecting the privacy of students, teachers, parents, and school administrators who use our platform.

2. Information We Collect

Account Information

• Name, email address, role (student, teacher, parent, admin)
• School and organization affiliation
• Authentication credentials (managed via SSO or Supabase Auth)

Educational Records

• Grades, assignments, and academic performance data
• Attendance records
• Report cards and transcripts
• Individual Education Plan (IEP) data
• Curriculum outcome progress

Usage Data

• Device information and browser type
• Pages visited and features used
• Session duration and timestamps

3. FERPA Compliance (United States)

WolfWhale operates as a “school official” under the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g. We process education records solely on behalf of the school or district under a contract that:

• Specifies the legitimate educational interest for data access
• Restricts re-disclosure of personally identifiable information (PII)
• Requires us to return or destroy education records upon request
• Ensures compliance with 34 CFR Part 99

4. COPPA Compliance (Children Under 13)

WolfWhale does not collect personal information directly from children under 13. All student accounts are created by school administrators acting as authorized agents. We comply with the Children’s Online Privacy Protection Act (COPPA) by:

• Requiring school/district consent before student data is collected
• Collecting only the minimum information necessary for educational purposes
• Not using student data for advertising or marketing
• Providing schools with the ability to review and delete student data

5. PIPEDA Compliance (Canada)

For Canadian users, WolfWhale complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation (e.g., LAFOIP in Saskatchewan). We:

• Obtain meaningful consent for data collection and use
• Limit collection to what is necessary for educational purposes
• Store data in compliance with Canadian data residency requirements
• Allow individuals to access and correct their personal information
• Appoint a privacy officer to oversee compliance

6. Student Data Protection

We implement strict safeguards for student data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access control: Role-based access with Row-Level Security (RLS) on all database tables
• Audit logging: All access to student records is logged with timestamps and user identity
• No advertising: Student data is never used for advertising, profiling, or sale to third parties
• Data minimization: We only collect data necessary for educational functions
• Data retention: Records are retained only for as long as the school requires, then securely deleted

7. Data Sharing

We do not sell, rent, or trade student data. We may share data with:

• School administrators within the same organization for legitimate educational purposes
• Service providers (e.g., Supabase for database hosting, Vercel for web hosting) under strict data processing agreements
• Legal authorities when required by law or to protect safety

8. Your Rights

You have the right to:

• Access your personal information
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Receive a copy of your data in a portable format
• Withdraw consent for non-essential data processing

9. Security

We implement industry-standard security measures including encryption, access controls, regular security audits, and vulnerability testing. Our infrastructure is hosted on Supabase (PostgreSQL) with enterprise-grade security certifications.

10. Contact

For privacy inquiries or to exercise your rights, contact our Privacy Officer:

• Email: privacy@wolfwhale.com
• Mail: WolfWhale EdTech, Saskatchewan, Canada